Skip to:
Content

BuddyPress.org

Opened 17 years ago

Closed 17 years ago

#509 closed defect (bug) (no action required)

Security improvement in group forums

Reported by: burtadsit Owned by: burtadsit
Priority: minor Milestone: 1.1
Component: Version:
Severity: Keywords:
Cc:

Description

The password used to access bbpress forums using bbpress_live is just in wp_1_options meta data in plain text. We have a user created in wp/bbpress that has a stored password. Encrypted. The user authentication on the bbpress side uses that username/password and validates access with the user account.

bp should do the same. I know this is sambauers code but this is a definite hole we need to plug.

Change History (6)

#1 @burtadsit
17 years ago

Forgot. Also we should have the password entry/change be the usual enter twice for validation in the backend admin form.

#2 @burtadsit
17 years ago

  • Owner set to burtadsit
  • Status new → assigned

#3 @apeatling
17 years ago

  • Milestone → Forums 1.1

One for 1.1.

#4 @(none)
17 years ago

  • Milestone Forums 1.1

Milestone Forums 1.1 deleted

#5 @apeatling
17 years ago

  • Milestone → 1.1

#6 @apeatling
17 years ago

  • Resolution → invalid
  • Status assigned → closed

XMLRPC has been removed. Now invalid.

Note: See TracTickets for help on using tickets.